New issue
Advanced search Search tips

Issue 767033 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Sep 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 1
Type: Bug



Sign in to add a comment

Improve privacy in 3rd party Android payment app integration.

Project Member Reported by rouslan@chromium.org, Sep 20 2017

Issue description

Although the spec has been improved for privacy, the old fields have been deprecated, but not removed. In particular, Chrome sends the deprecated "displayItems" field to the payment app. In order to improve user privacy without breaking old integrators, the "displayItems" field should be empty.

In addition, https://w3c.github.io/payment-handler/ does not send the label of the total parameter to the payment app, so Chrome should remove it as well.
 
Project Member

Comment 1 by bugdroid1@chromium.org, Sep 20 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/99dd5f0bd730f3f12ef2c483da16bf5e114167da

commit 99dd5f0bd730f3f12ef2c483da16bf5e114167da
Author: Rouslan Solomakhin <rouslan@chromium.org>
Date: Wed Sep 20 15:51:43 2017

[Payments] Improve privacy in 3rd party payment app integration.

Although the spec has been improved for privacy, the old fields have
been deprecated, but not removed. In particular, Chrome sends the
deprecated "displayItems" field to the payment app. In order to improve
user privacy without breaking old integrators, the "displayItems" field
should be empty.

In addition, https://w3c.github.io/payment-handler/ does not send the
label of the total parameter to the payment app, so Chrome should remove
it as well.

Spec:
https://docs.google.com/document/d/1izV4uC-tiRJG3JLooqY3YRLU22tYOsLTNq0P_InPJeE/edit

Bug:  767033 
Change-Id: I135e4292828e5fca236b9e7b610edac5d260258e
Reviewed-on: https://chromium-review.googlesource.com/675046
Reviewed-by: Ganggui Tang <gogerald@chromium.org>
Commit-Queue: Rouslan Solomakhin <rouslan@chromium.org>
Cr-Commit-Position: refs/heads/master@{#503161}
[modify] https://crrev.com/99dd5f0bd730f3f12ef2c483da16bf5e114167da/chrome/android/java/src/org/chromium/chrome/browser/payments/AndroidPaymentApp.java

Status: Fixed (was: Started)

Sign in to add a comment